HighOpenHomeHaat#2
Sign-in from a new IP for ad****@example.com
A successful sign-in from an IP this account hasn't used in 30 days: maybe a stolen password.
What to do
- Often it's just a new phone or Wi-Fi. If unsure, ask the account owner.
- For an admin account, confirm it was you; if not, change the password and sign out everywhere.
Demo: Acknowledge and Resolve are switched off here. In the real dashboard they work.
Evidence · 1 event
| Time (IST) | Source | Event | Who | IP | Where |
|---|---|---|---|---|---|
| HomeHaat | Admin login | ad****@example.com | 203.0.113.201 NL | POST / |
- Admin loginHomeHaat
· 203.0.113.201 NL
ad****@example.com
POST /
admin/ login/ · 200
Details
- MITRE ATT&CK
- T1078 Valid Accounts(opens in a new tab)
- About
- ad****@example.com
- First seen
- 02 Nov, 01:40:29 IST
- Last seen
- 02 Nov, 01:40:29 IST
Timeline
IST
Alert raised (high) with 1 event
IST
Email sent to you
Demo: notes are switched off here. In the real dashboard they work.